Firewall & Security Management

What’s New in Agentic Network Orchestration
21 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

Scaling Check Point Automation with Arodonata

Watch Here!

CheckMates Go:
Fun Ding

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

45900

How to measure bandwidth on CP Gateway?

45900

inside

Admin

45499

A simple and reliable way to make sure your management is up

45499

inside

Admin

45401

Security Visibility Best Practices with SmartEvent

45401

inside

Advisor

45299

Best Practice for HA sync interface

45299

Solved

inside

Participant

45199

How to revert a Policy or discard changes?

45199

inside

Participant

45100

Blocking IP using custom IOC feeds

45100

inside

Collaborator

44800

R80.10 - Set snapshot export command

44699

Solved

inside

MVP Gold

44499

"Set cluster member admin up" doesn't work

44299

Solved

inside

Collaborator

44100

Investigating CPU core consumption in R80.30 kernel 3.10 UMFW

44100

Solved

inside

Participant

43500

Threat Prevention is Not Block DNS Reputation Which Policy Are Block

43500

inside

Collaborator

43500

Problem with VPN traffic and Nated IPs

43500

Solved

inside

Contributor

43400

How to export Gaia config from a firewall

43400

inside

Admin

43199

DNS Malware trap - DNS servers

42799

inside

Employee Alumnus

42799

New Splunk App for Check Point Logs

42799

Solved

inside

Advisor

42498

URL and Application blade issues

42498

Solved

inside

Advisor

42396

Blocking pornography without https inspection

42396

Solved

inside

Collaborator

42300

Log Exporter CEF Field Mappings

42099

Solved

inside

Contributor

41999

Log_indexer Performance Issues because of core limitation

41999

inside

MVP Gold

41999

R80.20 fresh install fails on Vmware ESXI

41999

Solved

inside

Collaborator

41999

GAiA WebUI not working with latest Chrome browser

41599

inside

Participant

41499

How to configure Check Point as WAF?

41399

Solved

inside

Advisor

41399

How to identify transceiver / SFP+ adapter?

41399

inside

Advisor

41300

Viewing and Resetting VPN tunnels in R80

40999

inside

Advisor

40900

CyberArk - PSM Connection Component - SmartConsole + Gaia

40900

Solved

inside

Contributor

40899

Efficient way to disable several hundred IPS protections that do apply to our environment

40899

Solved

inside

Participant

40801

Difference between HTTPS Inspection and Categorize HTTPS websites settings

40801

inside

Contributor

40600

Checkpoint gateway Memory Usage

40600

inside

MVP Gold CHKP

40600

O365 access filtering in R80.10

40600

Solved

inside

Employee

40500

Review the changes in your current session in SmartConsole

40500

Solved

inside

Participant

40499

How to disable Gaia access from the Internet

40399

Solved

inside

Contributor

40299

How to check interfaces operation failure(down) log with GUI

40299

inside

Contributor

40199

Halting RAD requests handling / RAD reached maximum allowed concurrent request

40199

inside

Participant

40199

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

40199

inside

MVP Diamond

40099

A simple way to keep your Security Gateway up-to-date – we want to hear what you think!

40099

inside

Participant

39799

Unable to install R80.10 on VMware workstation

39799

inside

Advisor

39599

Check Point Security Gateway freezes, crashes, or reboots randomly, core dump files are not created

39599

inside

Contributor

39499

sk83520 how to check connectivity to CP

39499

Solved

inside

Participant

39402

Resizing Disk After Increasing Disk Size in VMware on Gaia

39402

Solved

inside

Contributor

39299

Intermittent VOIP One Way Audio

39299

inside

MVP Diamond

39202

policy migration from standalone to distributed

38900

inside

Participant

38800

Questions on upgrading from R80.10 to R80.40 or R81

38499

inside

Explorer

38399

Can't connect to management server via SmartDashboard

38199

Solved

inside

Contributor

38099

rtmd Demon causing high utilization (99% CPU)

38002

inside

Contributor

37995

FQDN and Domain Objects in R80.10 when DNS server fail?

37995

inside

Explorer

37900

IKE failure - no response from peer

37900

inside

Mentor

37693

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

37693

inside

Participant

37600

Move security gateways from different separated sms to an existing remote mds

37600

inside

Contributor

37499

'Invalid segment retransmission. Packet dropped.'

37399

inside

Champion

37200

Command to show the number of permitted cores

37099

inside

Advisor

36899

Anti-spoofing; network defined by routes with overlapping spaces

36899

Solved

inside

Employee Alumnus

36599

FQDN in R80 Policy Access rule

36599

Solved

inside

Participant

36597

How to know which cluster member is active?

36597

Solved

inside

Contributor

36499

Allow file download and block file upload with wetransfer

36399

Solved

inside

Participant

36399

Disable "Local interface address spoofing"

36399

inside

Collaborator

36199

MUH Identity Awareness Agent on Citrix randomly disconnects

36199

Solved

inside

Employee Alumnus

36100

ICAP Server on Sandblast Appliance (TEX)

36100

inside

MVP Gold CHKP

35999

Having problem with my clusterXL: Error message "HA module not started" after cphaprob stat.

35800

inside

Advisor

35799

Connection with 'xxxxx' is lost

35799

inside

Participant

35698

ClusterXL active/standby interchange command?

35698

Solved

inside

Explorer

35599

tcpdump for site to site vpn traffic

35599

Solved

inside

Advisor

35499

SmartLog only look back 14 days - how to reindex 90 days back?

35499

Solved

inside

Contributor

35399

Check SIC status without SmartConsole on Management

35399

Solved

inside

Participant

35200

IPSec VPN Site to Site_Checkpoint send wrong Proxy-ID in proposal phase 2

35200

Solved

inside

MVP Diamond

35199

Export of rules with zero hits in dashboard

35199

Solved

inside

Explorer

35100

High CPU usage on management server [r81.10]

35100

inside

Explorer

35099

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

35099

Solved

inside

Contributor

34999

viewing LOG - filter on NAT rule #

34899

inside

Contributor

34898

Expired Accounts view in R80.10 SmartConsole

34799

inside

Participant

34599

SmartConsole object problem on Windows 1903

34499

inside

Advisor

34499

Troubleshooting policy installation

34499

Solved

inside

Collaborator

34499

SMS Server R80.10 Extremely Slow and Cannot login

34301

Solved

inside

Participant

34299

VPN Check Point - Palo Alto issue

34199

Solved

inside

Participant

34199

Troubleshooting dropped packets in Checkpoint using zdebug

34199

inside

Participant

34001

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

34001

inside

Contributor

33999

Security Management and Gateway Same Host?

33999

Solved

inside

Contributor

33899

Custom view for getting Remote Access User Stats

33899

inside

Explorer

33800

PBR configuration is missing on Audit log

33800

Solved

inside

Advisor

33799

Virtual Standby member cannot reach internal DNS or Internet

33799

Solved

inside

Advisor

33799

Updatable SmartConsole Early Availability

33799

Solved

inside

Contributor

33797

SmartConsole: Multiple ReadWrite sessions for same administrator

33797

Solved

inside

Explorer

33700

Identity Awareness using Azure AD

33700

Solved

inside

Advisor

33699

Remote Access VPN Authentication Failure

33600

inside

Participant

33500

RSA secure ID authentication for checkpoint gateways and Management

33500

inside

Not applicable

33499

Unified Policy Column-based Rule Matching

33499

Solved

inside

Authority

33499

AD-query failed with Microsoft Windows Server 2022

33499

Solved

inside

Advisor

33399

R80.20: Administrators cannot log into Web Smartview GUI

33399

inside

MVP Silver

33399

Blocking list of domain names (FQDN) with R80.10

33299

inside

Contributor

33299

How to block traffic coming from known malicious IP addresses R81.10

33299

Solved

inside

Champion

33099

Behavior of the subscription blade policies after expiration

33099

inside

Participant

33099

ISP Redundancy - 2 default route pointing to different ISP

33099

inside

Explorer

33099

Policy installation failed: TCP connectivity failure port 18191

33099

inside

Participant

33001

UserCheck Block Page Times Out

33001

inside

Participant

186

Complex site-to-site redundant VPN topology (CP Gateways, 3rd-party gateways and Remote Users)

186

inside

Admin

105

Tips and Tricks 2026 #10 - Zero‑Downtime Migration to Smart‑1 Cloud

105

inside

Admin

104

Tips and Tricks 2026 #3 - Fix Smarter, Not Harder: Policy Insights that Transform Maintenance

104

inside

Explorer

312

Smart Event Reports with old logs

312

Solved

inside

Advisor

16243

New Smart-1 700S Appliance Unable to Activate License

521

inside

Explorer

504

Policy push seems to cause connectivity issues with FortiGate cluster on same VLAN

504

inside

Explorer

268

Missing SmartConsole HF #41 for OpenServer R82 restore, where to download?

268

Solved

inside

Participant

2619

Multiple outbound HTTPS inspection certificates

2619

inside

Explorer

2050

ElasticXL cluster configuration on 9100 Appliance

2050

Solved

inside

Contributor

308

ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb

1909

Solved

inside

MVP Diamond

11732

Site to Site VPN connection Narrowed

953

inside

Explorer

5130

Maximum amount of CPU cores supported by open server management

5130

inside

Explorer

663

Running VSX on cluster with different appliance

663

inside

Employee

2319

🚀 Excited to announce: Policy Auditor is now Generally available!

2319

inside

Advisor

395

SSH host key changed, unable to login to upgraded R81.20 MDS

395

inside

MVP Diamond CHKP

5006

Tech Tip - Dynamic Routing: Router-ID

5006

inside

Participant

6367

Checkpoint MAC learning problem

6367

inside

Employee

395

Check Point Quantum Gaia WebUI accessible from mobile device but not from Windows PC

212

Solved

inside

Explorer

22496

Checkpoint to ASA VPN traffic selection issue

22496

inside

Participant

511

Endpoint VPN client Continuously Connecting to VPN Gateway While on trusted Office Network

511

inside

MVP Diamond

2486

IPS Custom Policy Best Practices

2486

inside

Contributor

428

Please help me understand this NAT behavior

589

inside

MVP Diamond

310

VIDEO: Complete Check Point Hardware Diagnostic Execution

310

inside

Contributor

199

Switching VPN encryption method from IKEv1 to IKEv2 for a Cisco FPR peer

449

inside

MVP Diamond

774

Appliance stuck with POST error B4 after upgrading

486

inside

Collaborator

515

Best-Practice Routing and LACP Design Between Check Point ElasticXL and Palo Alto Active/Active Fire

515

inside

Contributor

283

TACACS+ Administrator Login: CLICMD0361 Failure setting current vrfid to 0 when transitioning to Exp

155

inside

MVP Diamond

350

Tip: Web SmartConsole Replace Has Improved

350

Solved

inside

Explorer

736

Application control VS. HTTPS Inspection

736

Solved

inside

Participant

314

VSX Cluster WAN VIP(Virtual IP) (checkpoint 9300,JHF-T146)

314

Solved

inside

Participant

2281

Import 2 Different Domain CA for outbound HTTPS inspection certificates

2281

inside

Participant

983

Specific Bond interface status down at VSX-Cluster(checkpoint 9300)

983

inside

Contributor

2663

SAML Authentication to Azure Entra ID with Authorization - Complete guide

2663

inside

MVP Diamond

7486

CVE-2026-16232: Active Exploitation Requires Immediate Management Plane Remediation

7486

Solved

inside

MVP Diamond CHKP

2822

Tech Tip - Dynamic Routing: BFD

2822

Solved

inside

MVP Diamond CHKP

1154

Tech Tip – R82 Upgrade (SMS): Virtual Machine NIC Type

1154

inside

Participant

598

SMS R81.20 Take 127 Hotfix Verification Error : No space available

598

inside

MVP Diamond

918

Jumbo Hotfix Installation on an single firewall or HA Cluster r80.xx r81.XX

918

inside

MVP Gold

1755

ElasticXL Traffic Distribution question

7461

inside

Explorer

4476

Problem with Internet Router installation

4476

Solved

inside

Participant

10728

RADIUS Authentication over Site-to-Site VPN

10728

Solved

inside

Collaborator

710

Can a Permission Profile allow 'Manage Administrators' without 'Install Policy' rights?"

710

Solved

inside

Participant

14488

Restrict access to specific policies

14488

inside

MVP Diamond

2478

CVE + Signature + Evidence: the shortest path from “alert” to a defensible decision

2478

inside

Explorer

4251

Site-to-Site IPsec VPN using certificate-based authentication.

4251

inside

MVP Diamond

670

Policy installation failed on gateway. Error code: 0-2-200262

670

inside

Explorer

424

DAIP Gateway with Remote Access VPN

424

inside

Contributor

244

Old R81.20 directories under /var/log/opt after successful upgrade to R82 - safe to remove?

244

inside

MVP Diamond

4931

User Space Firewall vs Kernel Space Firewall: Why Firewall Mode Matters for Troubleshooting in R82

4931

Solved

inside

MVP Silver

582

Restricting Files via Check Point

582

inside

Explorer

300

Authentication Failed with Certificate-Based IPsec VPN (Check Point Hub + FortiGate Dynamic IP Spoke

300

Solved

inside

Advisor

14839

VPN site-to-site with Remote Peer Dynamic IP

14839

inside

Explorer

3507

IPS not working - "Threat prevention requires topology to be defined"

3507

inside

Explorer

212

Licenses migrate from the old security gateway to the new one

212

Solved

inside

Collaborator

257

Broken link for deleteValidationIncidents.sh in sk184400

257

inside

Advisor

1564

RADIUS authentication fails due to replacement servers

1564

inside

Participant

681

Install R81.20 and Adding Quad Card before

681

Solved

inside

Collaborator

10246

Notification of expiring VPN certificate

10246

inside

MVP Silver

221

Policy Auditor: Turning Access Control Policy Review into Intent-Based Segmentation Validation Par 2

499

inside

MVP Silver

212

GRE tunnel through R82 ElasticXL

212

inside

MVP Diamond CHKP

948

Hardening Recommendation Report in Web SmartConsole - SK185102 - What's New

948

Solved

inside

Explorer

354

Question on ElasticXL second member lightshot partition saturation during join progress in cluster

354

Solved

inside

MVP Diamond

1173

Security Group Tag from Cisco ISE not assigned to Access Role

1173

inside

Participant

377

Creating a report based on anti-spoofing drops

377

Solved

inside

Employee

345

MLM Server Virtual Machine Disk Volume Shrink?

345

inside

MVP Diamond

1132

CVE-2026-16232: Exploração Ativa Exige Remediação Imediata do Plano de Gerenciamento

1132

Solved

inside

Advisor

386

IPsec VPN Certificate-Based Authentication Failed – Authentication Failed

435

inside

Explorer

293

SMS migration and IP change on VMware R82.10

293

inside

Contributor

290

ldap communication has stop to work

311

Solved

inside

MVP Gold

2375

MEP still active after disable

538

inside

Explorer

6159

ABR (Application Based Routing): "PBR_" rules don't show up on firewalls

6159

inside

Explorer

291

How to unload a specific policy in smart1 cloud to a specific site?

291

inside

Authority

1203

ElasticXL switch configuration for data interfaces ?

1203

inside

MVP Gold CHKP

289

Why do we need Zero Trust today more then ever before?

289

inside

Explorer

1155

Some sites not working with HTTPS Inspection enabled

1155

Solved

inside

Collaborator

432

ElasticXL R82.x Licensing Clarification – Single License or Per Appliance?

432

Solved

inside

Participant

4621

VPN with Two GWs Managed by One SMS - One GW is in AWS

4621

Solved

inside

Explorer

268

Migrate secondary management to new hardware

268

inside

Advisor

225

Recommended way to update Firewall 3920

894

Solved

inside

Explorer

3279

Infinity Cloud Rest API Container loop

3279

inside

Contributor

992

ClusterXL R81.20 SmartConsole display different cluster configuration

588

inside

MVP Diamond

4797

Upgrade Software - Check Point How-To

4797

Solved

inside

MVP Diamond

8097

Converting Tool - ClusterXL to ElasticXL

8097

inside

Explorer

330

Certificate cannot be validated. Reason: Could not retrieve CRL." with External CA

330

Solved

inside

Collaborator

755

IPSec Tunnel (Center - Sattelite) not comming up anymore

755

inside

Explorer

246

Interoperability Device Object for Dynamic IP

246

inside

Contributor

6788

R82 - vpn accel is deprecated?

625

inside

Advisor

5798

Policy Push Time. Accelerated Policy Install. Global Objects

5798

Solved

inside

Contributor

5997

Site-2-Site VPN with Cisco Cloud (Cisco Secure Acccess)

3691

inside

Contributor

10656

IPS - HTTP parsing error detected

10656

inside

MVP Silver

2188

Check Point Firewall: Policy-Based Routing (PBR) | Dual ISP Configuration Guide

2188

Solved

inside

Collaborator

490

R81.20 JHFA update from 119 to 146, gateway looses connectivity during update at 14%

490

inside

MVP Diamond

549

Policy Auditor: Turning Access Control Policy Review into Intent-Based Segmentation Validation

549

inside

Explorer

237

File sdconf.rec in VSX Gateway Cluster

704

Solved

inside

Advisor

464

Is there any API or CLI command to automate External CA (.p12) certificate replacement on Gateways?

127

inside

MVP Diamond

1741

Web SmartConsole - Global Properties still not available

612

inside

Collaborator

542

Management Interface Setup with PBR

542

inside

Advisor

15954

Traffic dropped with message information: "Rulebase Internal Error"

15954

inside

MVP Diamond

19722

R82 DynamicID via Email (SMTP) – Configuration Tips and Key Considerations

1310

inside

MVP Diamond

1107

IPS Performance in R82/R82+: Why SND, CoreXL, SecureXL, PXL, PSL and Multi-Queue Matter More Than “I

1107

Solved

inside

Participant

19844

Configure Checkpoint as NTP server

19844

inside

Advisor

824

Office Mode traffic hitting Cleanup Rule despite correct Identity Awareness

824

inside

MVP Diamond

766

[TIP] Check Point Migration Backup: Collecting Relevant Files Before a Clean Install

766

inside

MVP Diamond

750

[INFO] Why Can Gaia Configure LOM If LOM Is Supposed to Be Independent?

750

inside

Contributor

330

3900 series with R82.10:jumbo hotfix Take19 does not install properly and breaks firewall

1452

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Tue 13 Oct 2026 @ 06:00 PM (IDT)

AI Security Masters: LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails

Virtual

Wed 14 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Secure Load Balancing

Wed 14 Oct 2026 @ 01:00 PM (EDT)

Securing AI Apps & Agents

Virtual

Thu 15 Oct 2026 @ 05:00 PM (CEST)

What If Email Security Ran Your Security Awareness Program?

Virtual

Tue 20 Oct 2026 @ 04:00 PM (CEST)

EMEA: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Tue 20 Oct 2026 @ 03:00 PM (EDT)

AMER: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Wed 14 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Secure Load Balancing

Virtual

Thu 15 Oct 2026 @ 05:00 PM (CEST)

What If Email Security Ran Your Security Awareness Program?

Virtual

Tue 20 Oct 2026 @ 04:00 PM (CEST)

EMEA: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Tue 20 Oct 2026 @ 03:00 PM (EDT)

AMER: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Wed 21 Oct 2026 @ 11:00 AM (EDT)

TechTalk: What’s new in Agentic Network Orchestration

Virtual

Thu 22 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Enterprise Browser

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Tue 27 Oct 2026 @ 08:00 AM (CET)

Cloud & SASE Security Workshops, London

In-Person

Thu 29 Oct 2026 @ 11:00 AM (PDT)

Irvine, CA: Secure the Network, the App, and the Workforce: A Hybrid Mesh & SASE Briefing

In-Person

Wed 04 Nov 2026 @ 11:00 AM (EST)

Toronto: Agentic AI Security Deep Dive & Hands-On

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?